This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft File: gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json) Hash identifier: uBuaNP/uH0x8TITaqXY5G40dmSJW7t2Nkz0oq+A85kI= Subject key identifier: 19:AE:3F:B0:CF:90:E6:B2:8A:C0:69:6F:35:CF:4C:27:52:EA:B1:1B Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3 Certificate serial: 019BDF2423DAB321037323055ED20A0299ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft Manifest number: 17E4 Signing time: Wed 21 Jan 2026 06:00:46 +0000 Manifest this update: Wed 21 Jan 2026 06:00:46 +0000 Manifest next update: Thu 22 Jan 2026 06:00:46 +0000 Files and hashes: 1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=) 2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=) 3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=) 4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: PQtHTFL0yeO2SFfApPHENu0z21ADCUUVV4NqCmxMqDo=) 5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:23:da:b3:21:03:73:23:05:5e:d2:0a:02:99:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3 Validity Not Before: Jan 21 06:00:46 2026 GMT Not After : Jan 22 06:00:46 2026 GMT Subject: CN=19ae3fb0cf90e6b28ac0696f35cf4c2752eab11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4f:fa:92:95:32:34:4f:b5:c6:f8:22:a6:0d: 2e:c2:31:1b:bb:a2:4c:b7:12:9c:3b:98:3e:d5:09: 23:02:4d:6f:3e:6c:a4:19:d0:a5:61:f6:d4:5a:53: eb:99:4e:b3:ec:84:66:ca:2a:77:89:48:2d:06:30: ff:9d:f6:60:cc:0e:5d:a9:d1:b8:56:f4:56:e2:9f: 5c:d3:ee:13:17:da:b1:d5:cf:af:6b:01:6d:08:d9: c1:65:6c:8a:41:48:94:76:73:12:6f:1e:13:9f:8f: ad:5e:00:b3:ea:54:a8:9c:35:f1:63:b6:23:6c:3d: 29:16:dc:36:0f:78:bc:6e:f9:20:f8:bc:23:46:fb: 4e:08:16:c8:bb:62:c4:08:4a:92:18:1e:88:d5:06: 94:35:bc:b4:e4:9a:15:cc:1f:d1:ab:31:a2:79:19: 36:98:65:82:78:91:27:90:ee:50:57:c9:74:2d:73: d7:17:19:a8:70:64:0e:f3:51:9e:07:8a:35:95:fa: f1:45:21:d7:f3:3d:16:4c:70:fb:3f:46:62:59:91: 43:b9:8f:14:73:95:26:4a:30:35:e0:b1:f1:08:ee: 50:1b:02:d8:14:0a:71:bc:07:4b:27:a4:a5:3a:3b: e5:6a:a0:04:4e:bb:95:14:80:3c:55:88:bf:98:93: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:3F:B0:CF:90:E6:B2:8A:C0:69:6F:35:CF:4C:27:52:EA:B1:1B X509v3 Authority Key Identifier: keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b0:c9:51:9b:20:c7:f7:67:fd:ed:ef:37:87:a1:b9:b5:59: 60:ef:32:a2:20:5b:1a:a2:4c:52:cd:a0:b1:a1:4c:35:7c:ed: 21:7c:a6:30:29:e5:f2:9b:96:5a:6f:d0:99:a5:9d:8f:f8:08: 8c:f4:55:4a:e9:ab:c7:37:0b:0c:21:e1:fe:6e:37:e9:a7:48: 91:cf:31:8f:d0:cf:f2:03:3f:36:28:70:e3:f5:fc:7b:9a:ba: 7c:12:3b:79:c5:15:e4:f4:d6:45:c1:05:b5:23:b3:b3:9b:50: f0:4c:98:e3:35:80:1b:4b:94:33:c1:22:b3:e3:bb:99:f1:a3: 4c:7b:ed:d5:a8:ba:5d:37:b1:3d:a4:9e:96:f2:96:7c:4f:b7: 80:6f:c9:23:5e:d8:76:06:1d:a9:9b:67:68:4a:c1:a8:85:33: f4:f9:de:f8:77:de:3f:a9:1f:d3:f4:15:be:5e:ab:83:98:c2: 1b:a8:80:a2:b4:5a:a1:2f:3e:19:e2:08:26:bb:19:b2:1a:f8: 34:14:32:dc:33:33:b7:1b:3d:67:f6:b4:38:7e:cd:77:7f:08: 9d:8f:52:7e:1c:08:71:3d:9e:da:23:d7:56:d2:a0:75:a1:b3: 4c:f3:c7:69:9e:9c:3d:0a:28:49:31:8f:9f:ed:48:57:fb:5c: 6f:5b:b8:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJCPasyEDcyMFXtIKApntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh NDI4YzMwHhcNMjYwMTIxMDYwMDQ2WhcNMjYwMTIyMDYwMDQ2WjAzMTEwLwYDVQQD EygxOWFlM2ZiMGNmOTBlNmIyOGFjMDY5NmYzNWNmNGMyNzUyZWFiMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE/6kpUyNE+1xvgipg0uwjEbu6JM txKcO5g+1QkjAk1vPmykGdClYfbUWlPrmU6z7IRmyip3iUgtBjD/nfZgzA5dqdG4 VvRW4p9c0+4TF9qx1c+vawFtCNnBZWyKQUiUdnMSbx4Tn4+tXgCz6lSonDXxY7Yj bD0pFtw2D3i8bvkg+LwjRvtOCBbIu2LECEqSGB6I1QaUNby05JoVzB/RqzGieRk2 mGWCeJEnkO5QV8l0LXPXFxmocGQO81GeB4o1lfrxRSHX8z0WTHD7P0ZiWZFDuY8U c5UmSjA14LHxCO5QGwLYFApxvAdLJ6SlOjvlaqAETruVFIA8VYi/mJMCjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmuP7DPkOayisBpbzXPTCdS6rEbMB8GA1UdIwQY MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt YmU5YWQyYmY3MjVmLzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrDJUZsg x/dn/e3vN4ehubVZYO8yoiBbGqJMUs2gsaFMNXztIXymMCnl8puWWm/QmaWdj/gI jPRVSumrxzcLDCHh/m436adIkc8xj9DP8gM/Nihw4/X8e5q6fBI7ecUV5PTWRcEF tSOzs5tQ8EyY4zWAG0uUM8Eis+O7mfGjTHvt1ai6XTexPaSelvKWfE+3gG/JI17Y dgYdqZtnaErBqIUz9Pne+HfeP6kf0/QVvl6rg5jCG6iAorRaoS8+GeIIJrsZshr4 NBQy3DMztxs9Z/a0OH7Nd38InY9SfhwIcT2e2iPXVtKgdaGzTPPHaZ6cPQooSTGP n+1IV/tcb1u4Rg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:34 2026 by rpki-client